CVE-2019-12259

Description

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There is an IPNET security vulnerability: DoS via NULL dereference in IGMP parsing.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

24.457

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in Wind River VxWorks 6.8	Windows
Multiple Vulnerabilities are affected in Wind River VxWorks 6.6	Windows
Multiple Vulnerabilities are affected in Wind River VxWorks 6.7	Windows
Multiple Vulnerabilities are affected in Wind River VxWorks 6.9	Windows
Multiple Vulnerabilities are affected in Wind River VxWorks 7	Windows
Multiple Vulnerabilities are affected in Wind River VxWorks 7.0	Windows
NULL Pointer Dereference Vulnerability (CVE-2019-12259)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234